{"metadata": {"vulnerability": "cve-2026-109246", "count": 12, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-28T00:00:00Z", "date_only": false, "value": "2026-09-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109246", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-12T14:07:56.521Z", "date_only": false, "value": "2026-10-12T14:07:56.521Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-109246", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T16:04:21.002Z", "date_only": false, "value": "2026-10-12T16:04:21.002Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-109246", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-12T16:04:21.002Z", "date_only": false, "value": "2026-10-12T16:04:21.002Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-109246", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:04:21.002Z", "date_only": false, "value": "2026-10-12T16:04:21.002Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "cve-2026-109246", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-12T16:32:51.983Z", "date_only": false, "value": "2026-10-12T16:32:51.983691Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117428897155103973", "record": "CVE-2026-109246", "field": "creation_timestamp", "uuid": "132eae0a-9477-415e-99d4-4c28db2a396a", "content": "CVE-2026-109246 FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cli shadow server: the frame id in a client's Frame Acknowledge PDU is stored without a range check, so the in-flight frame count in shadow_encoder_inflight_frames() can underflow. An authenticated client can acknowledge a frame id one greater than the last frame sent, causing shadow_encoder_create_frame_id() to divide by zero (SIGFPE) and terminate the process, disconnecting all viewers.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109246https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-6vjv-4hm3-6698https://www.vulncheck.com/advisories/freerdp-before-3.32.0-shadow-server-divide-by-zero-via-frame-acknowledge-pdu#FreeRDP#CVE_2026_109246#bot", "url": "https://infosec.exchange/users/cve/statuses/117428897155103973"}, {"timestamp": "2026-10-12T17:17:15Z", "date_only": false, "value": "2026-10-12T17:17:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JPMC-9Q62-WVPV", "record": "GHSA-JPMC-9Q62-WVPV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-12T17:17:15.630Z", "date_only": false, "value": "2026-10-12T17:17:15.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109246", "record": "FKIE_CVE-2026-109246", "field": "published"}, {"timestamp": "2026-10-12T17:49:12.641Z", "date_only": false, "value": "2026-10-12T17:49:12.641103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/2ewdmrhbw5mvx", "record": "CVE-2026-109246", "field": "creation_timestamp", "uuid": "edd655f7-25ed-4ac1-ade5-67e90b0aeaa3", "content": "CVE-2026-109246 - FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU\nCVE ID : CVE-2026-109246\n \n Published : 12 octobre 2026 16:04 | 25\u00a0minutes ago\n \n Description : FreeRDP before 3.32.0 contains a divide-by-zero vulnerability in the freerdp-shadow-cl...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/2ewdmrhbw5mvx"}, {"timestamp": "2026-10-12T18:31:37Z", "date_only": false, "value": "2026-10-12T18:31:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JPMC-9Q62-WVPV", "record": "GHSA-JPMC-9Q62-WVPV", "field": "published"}, {"timestamp": "2026-10-12T18:31:37Z", "date_only": false, "value": "2026-10-12T18:31:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JPMC-9Q62-WVPV", "record": "GHSA-JPMC-9Q62-WVPV", "field": "modified"}, {"timestamp": "2026-10-14T20:11:45.520Z", "date_only": false, "value": "2026-10-14T20:11:45.520", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109246", "record": "FKIE_CVE-2026-109246", "field": "lastModified"}]}